Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/yktwhUUBLOIGn1XDsHy1mGnlonw.roa
File: yktwhUUBLOIGn1XDsHy1mGnlonw.roa (raw, json)
Hash identifier: 5x1M3qnqVfwwOmqBKAGUdZdcuRIhVEhH4USdnUmUe9g=
Subject key identifier: CA:4B:70:85:45:01:2C:E2:06:9F:55:C3:B0:7C:B5:98:69:E5:A2:7C
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 018CC4254D31DA237F411CC1E0542BEAD063
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/yktwhUUBLOIGn1XDsHy1mGnlonw.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203890
IP address blocks: 195.150.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4d:31:da:23:7f:41:1c:c1:e0:54:2b:ea:d0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca4b708545012ce2069f55c3b07cb59869e5a27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ca:07:13:af:3c:51:4f:0f:d2:d6:02:f0:7b:
b4:b4:78:ba:20:e0:a3:b3:06:2e:5b:b8:87:32:9a:
09:73:64:2f:e1:8f:a8:1f:21:d2:10:38:7d:57:a2:
a9:0b:83:00:e8:55:75:82:89:3b:74:2d:d3:6f:07:
d8:f7:17:a0:a9:74:79:24:1c:04:47:41:7f:c4:e6:
1a:f5:c3:21:f8:45:36:e6:ff:84:cd:3a:0f:12:7e:
2b:57:43:1b:c9:ad:e2:d0:73:44:55:9e:c7:28:29:
e5:70:88:ad:6d:3e:ed:7a:f1:05:18:33:32:6f:4b:
10:57:3f:71:a7:31:92:79:22:94:4a:25:69:17:5f:
8c:9c:89:13:70:8a:e2:b5:d5:56:d6:49:f6:bb:13:
c5:de:da:89:dc:13:85:d3:2e:83:75:ee:60:d0:32:
73:43:ce:78:6b:bd:53:7a:ef:7c:2a:a2:aa:25:4b:
fd:3b:9b:e6:72:d8:ff:b8:77:c3:a5:48:c9:dd:5b:
03:1f:09:94:28:4a:15:ce:fc:d4:b4:ba:80:e3:27:
5f:ff:d3:e0:04:59:e5:b0:c5:2e:5e:c7:b8:d6:bb:
16:a0:88:b0:69:32:8e:ce:e6:08:bc:0b:31:a2:e5:
8c:af:0f:69:0c:f4:ba:31:4f:2e:df:56:67:d9:75:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4B:70:85:45:01:2C:E2:06:9F:55:C3:B0:7C:B5:98:69:E5:A2:7C
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/yktwhUUBLOIGn1XDsHy1mGnlonw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.150.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:84:95:f7:85:7f:be:87:b4:1e:e1:f7:ee:eb:11:41:35:af:
c0:cc:a0:7c:a3:20:99:a3:8d:44:74:29:76:3d:9a:86:49:6b:
f8:16:9d:5b:c8:21:85:d8:43:43:5d:81:29:57:55:e3:76:5b:
9a:72:f7:ff:4a:30:18:3e:67:cd:e9:9c:a8:7a:98:ea:b7:81:
e4:2a:fd:a9:20:ac:34:a8:91:b2:e7:f3:42:85:d4:32:49:3e:
06:f1:79:1e:47:0c:31:9c:0e:be:cf:c1:13:14:c4:af:6f:7c:
d2:b7:16:3a:92:27:b1:f4:3d:f1:4b:16:fc:a8:63:c3:db:5e:
77:42:5d:61:e1:79:d4:ed:42:64:60:f7:95:55:90:d1:68:60:
14:43:f5:51:2d:04:31:41:d0:c0:89:9c:e2:c4:b6:fb:b6:9d:
1b:83:08:9c:32:51:2d:1f:89:70:c9:c6:49:c6:b4:5c:d7:2d:
2a:ae:08:35:20:8d:50:04:62:f5:13:fd:1f:7b:c4:b3:ec:60:
0e:57:cf:ae:b9:5a:ce:a0:ea:e5:fa:40:bb:ee:9d:a7:81:f9:
04:87:10:f4:5a:00:59:5c:f8:36:7b:a7:68:91:a5:b1:bd:4f:
7b:9c:05:3b:86:2f:ae:55:41:61:81:20:fd:79:e6:d2:9f:f6:
e0:11:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:40:04 2024 by rpki-client on console-ams.rpki-client.org